{"id":18293,"date":"2026-08-02T20:39:16","date_gmt":"2026-08-03T03:39:16","guid":{"rendered":"https:\/\/jasonsblog.ddns.net\/?p=18293"},"modified":"2026-08-02T20:39:16","modified_gmt":"2026-08-03T03:39:16","slug":"is-the-coldcard-disaster-a-state-level-attack","status":"publish","type":"post","link":"https:\/\/jasonsblog.ddns.net\/index.php\/2026\/08\/02\/is-the-coldcard-disaster-a-state-level-attack\/","title":{"rendered":"Is The Coldcard Disaster A State-Level Attack?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">I was thinking of doing a blog post about the Coldcard Q debacle possibly being a state level attack on Bitcoin because the timing and damage is just to perfect for undermining Bitcoin and people employing self-custody, all right about the time of BIP-110 and the CLARITY Act shenanigans&#8230; And low and behold Matthew Kratter beat me to it, and he put together some interesting connections. And the reports that this bug was known and exploited over the years on a limited scale paints an interesting picture, and shows it was known. Was it a setup to burn people with the Coldcard employees in on the scam? Was this an exit scam? Or were they co-opted by national intelligence to perpetrate this scam, perhaps under blackmail? I could go on and on with scenarios, but it was enough for me to drain my Coldcard Q of the few hundred dollars on it, at least until a time the firmware goes through a serious audit, which should happen soon if for no other reason than the class action lawsuit and criminal prosecutions. It&#8217;s fabulous conspiracy theory territory.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Is The Coldcard Disaster A State-Level Attack?\" width=\"1290\" height=\"726\" src=\"https:\/\/www.youtube.com\/embed\/F6Pig2rRoGE?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Consequently, I was thinking of going through Learning Bitcoin and getting into the coding of a wallet, and go through the cryptographic code in the firmware. As it is getting to the point that deeper knowledge of how things work would be beneficial.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I was thinking of doing a blog post about the Coldcard Q debacle possibly being a state level attack on Bitcoin because the timing and damage is just to perfect for undermining Bitcoin and people employing self-custody, all right about the time of BIP-110 and the CLARITY Act shenanigans&#8230; And low and behold Matthew Kratter [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,7],"tags":[],"class_list":["post-18293","post","type-post","status-publish","format-standard","hentry","category-tech","category-world"],"blocksy_meta":[],"featured_image_src":null,"author_info":{"display_name":"Jason","author_link":"https:\/\/jasonsblog.ddns.net\/index.php\/author\/jturning\/"},"_links":{"self":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/18293","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/comments?post=18293"}],"version-history":[{"count":1,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/18293\/revisions"}],"predecessor-version":[{"id":18294,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/18293\/revisions\/18294"}],"wp:attachment":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/media?parent=18293"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/categories?post=18293"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/tags?post=18293"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}